Delegation problem with BIND 9.x.x

[Mark.Andrews at nominum.com]

	Make sure that fruitbat.eu.sanchez.com is serving dummy
	dummy.eu.sanchez.com.

	The NXDOMAIN is what is returned from fruitbat.eu.sanchez.com
	to a NS query for dummy.eu.sanchez.com.
	
	Mark

> No. eu is delegated from ironchurch.com and dummy subsequently from within
> the eu.ironchurch.com zone.
> 
> Martin
> 
> -----Original Message-----
> From: Mark.Andrews at nominum.com [mailto:Mark.Andrews at nominum.com]
> Sent: Tuesday, January 09, 2001 8:32 PM
> To: Martin O'Nions
> Cc: 'bind-users at isc.org'
> Subject: Re: Delegation problem with BIND 9.x.x 
> 
> 
> 
> 	Do you have both eu.ironchurch.com and dummy.eu.ironchurch.com
> 	delegated from ironchurch.com?
> 
> 	Mark
> 
> > 
> > This has got to be a kickself, but it's been bugging me for a little
> while.
> > A delegation that works fine with BIND 8 breaks when I put up 9.anything
> on
> > my FreeBSD 4.1 (or OpenBSD 2.8) server. This has been through a number of
> > interations and test cases, but for the purposes of this, the delegated
> > domain is dummy.eu.ironchurch.com and the appropriate name server is
> > fruitbat.eu.ironchurch.com.
> > 
> > I'm using the same named.conf and zone files for both versions of named,
> but
> > whilst BIND 8 works as I expect, BIND 9 gives me an NXDOMAIN for an NS
> query
> > against dummy (but correctly returns the NS record if I do an ANY query).
> > 
> > I'm quite prepared to believe that I'm doing something stoopid, but I'd
> > really like to know what.
> > 
> > Finally, if anyone wants the zone file or named.conf contents, mail me.
> > Yeah, some of the names shown here are changed, but this is an internal
> zone
> > that couldn't be queried from the outside world anyway.
> > 
> > Martin
> > 
> > Here's the dig outputs for the different cases:
> > 
> > # With BIND 8 (as shipped with FreeBSD 4.1)
> > 
> > $ dig @172.31.241.1 dummy.eu.ironchurch.com ns
> > 
> > ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns 
> > ; (1 server found)
> > ;; res options: init recurs defnam dnsrch
> > ;; got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> > ;; QUERY SECTION:
> > ;;	dummy.eu.ironchurch.com, type = NS, class = IN
> > 
> > ;; ANSWER SECTION:
> > dummy.eu.ironchurch.com.	1H IN NS	fruitbat.eu.ironchurch.com.
> > 
> > ;; ADDITIONAL SECTION:
> > fruitbat.eu.ironchurch.com.  1H IN A  172.31.241.2
> > 
> > ;; Total query time: 1 msec
> > ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> > ;; WHEN: Tue Jan  9 14:24:00 2001
> > ;; MSG SIZE  sent: 38  rcvd: 77
> > 
> > # Same zone file, same named.conf, but BIND 9.*
> > 
> > $ dig @172.31.241.1 dummy.eu.ironchurch.com ns
> > 
> > ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com ns 
> > ; (1 server found)
> > ;; res options: init recurs defnam dnsrch
> > ;; got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> > ;; QUERY SECTION:
> > ;;	dummy.eu.ironchurch.com, type = NS, class = IN
> > 
> > ;; Total query time: 22 msec
> > ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> > ;; WHEN: Tue Jan  9 14:23:23 2001
> > ;; MSG SIZE  sent: 38  rcvd: 38
> > 
> > 
> > $ dig @172.31.241.1 dummy.eu.ironchurch.com any
> > 
> > ; <<>> DiG 8.3 <<>> @172.31.241.1 dummy.eu.ironchurch.com any 
> > ; (1 server found)
> > ;; res options: init recurs defnam dnsrch
> > ;; got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
> > ;; QUERY SECTION:
> > ;;	dummy.eu.ironchurch.com, type = ANY, class = IN
> > 
> > ;; ANSWER SECTION:
> > dummy.eu.ironchurch.com.	1H IN NS	fruitbat.eu.ironchurch.com.
> > 
> > ;; AUTHORITY SECTION:
> > eu.ironchurch.com.		1H IN NS	spike.eu.ironchurch.com.
> > eu.ironchurch.com.		1H IN NS	tacoma.eu.ironchurch.com.
> > 
> > ;; ADDITIONAL SECTION:
> > fruitbat.eu.ironchurch.com.  1H IN A  172.31.241.2
> > spike.eu.ironchurch.com.	1H IN A		172.31.241.1
> > tacoma.eu.ironchurch.com.	1H IN A		172.31.240.5
> > 
> > ;; Total query time: 4 msec
> > ;; FROM: spike.eu.ironchurch.com to SERVER: 172.31.241.1
> > ;; WHEN: Tue Jan  9 14:23:33 2001
> > ;; MSG SIZE  sent: 38  rcvd: 150
> > 
> > 
> > 
> > 
> > 
> > 
> --
> Mark Andrews, Nominum Inc.
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com